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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claims 1-10, 14, 16-25, 29, 31-40, 44, 46 rejected under 35 U.S.C. 102(b) as 
being anticipated by Kadooka, US Patent No 5606663 (hereafter referred to as '663). 

3. Astoclaim(s)1,46: 

'663 teaches a computer password authentication/update system comprising: 

• Storing registered signature data / Previously set passwords (Col 2, Line 23, 
'663), Currently used password stored in password hysteresis memory unit (Col 
2, Line 15, '663) 

• Comparing entered signature data with registered signature data to calculating 
an evaluation value / Receiving updated password from input unit searching 
passwords stored in the password hystersis memory unit to check whether or not 
the same password exists among the passwords so far set, updating the 
password if it does not (Col 2, Lines 21-26, '663), stored date and time of 
availability period (Col 3, Line 54-55, '663) 
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• Determine authentication based on signature evaluation value / comparing 
current date and hour and the availability period of a current password (Col 3, 
Line 8-10, '663) 

• Determining aging based on evaluation value / If the update period for the current 
password expires update processing unit invalidates the password (Col 3, Line 
24-25, '663) 

4. As to claim(s) 2: 

Storing evaluation values calculated in the past with dates as list / Adding the evaluation 
value to list / Determining if aging has occurred after value is added to list / Receiving 
updated password from input unit searching passwords stored in the password 
hystersis memory unit to check whether or not the same password exists among the 
passwords so far set, updating the password if it does not (Col 2, Lines 21-26, *663), 
stored date and time of availability period (Col 3, Line 54-55, '663) 

5. As to claim(s) 3: 

Determining age when authentication is successful / when a password is entered into 
the computer system to log it in the current date and hour given from the chronometric 
unit and the available period of the currently used password are checked (Col 2, Lines 
11-17, '663) 



6. As to claim(s) 4: 
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Requesting re-registration of registered signature when aging has occurred / if the 
password is in its updating period, notifies said update processing unit 5 of a request for 
password updating (Col 3, Line 7-11, '663) 

7. As to claim(s) 5: 

Issuing a warning when aging has occurred / Display unit displays change request 
messages and reentry request messages (Col 3, Line 27-28, '663) 

8. As to claim(s) 6: 

Aging has occurred when value is over prescribed criterion / If the update period for the 
current password expires update processing unit invalidates the password (Col 3, Line 
24-25, '663) 

9. As to claim(s) 7: 

Adding determination calculates an estimated value for the next run of signature 
process based on data list / Figures out the average access interval for the user (Col 4, 
Line 6, '663) 

Aging has occurred when value is over prescribed criterion / If the update period for the 
current password expires update processing unit invalidates the password (Col 3, Line 
24-25, '663) 



10. As to claim(s) 8: 
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Projected date for next run of signature authentication based on date stored in data list/ 
The frequencies of user X's and user Y's accesses to the system are taken into account 
in prescribing all these available periods (A), (A*) and (A"). (Col 3, Line 46-49, *663) 

11. As to claim(s) 9: 

Age determination based on prescribed period of time from storage of registered 
signature / The frequencies of user X's and user Y's accesses to the system are taken 
into account in prescribing all these available periods (A), (A') and (A"). (Col 3, Line 46- 
49, '663) 

12. As to claim(s) 10: 

Aging determined when elapsed time since last successful authentication to current 
successful authentication is over prescribed period of time / If the update period for the 
current password expires update processing unit invalidates the password (Col 3, Line 
24-25, '663) 

13. As to claim(s) 14: 

Stored signature data includes initial signature and last successful signature / / 
Previously set passwords (Col 2, Line 23, '663), Currently used password stored in 
password hysteresis memory unit (Col 2, Line 15, '663) 

Comparing entered signature data with initial signature data and last signature data to 
calculate respective evaluation values to determine successful authentication / 
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Receiving updated password from input unit searching passwords stored in the 
password hystersis memory unit to check whether or not the same password exists 
among the passwords so far set, updating the password if it does not (Col 2, Lines 21- 
26, '663), stored date and time of availability period (Col 3, Line 54-55, '663). 
Aging determined by evaluation values calculated from comparison of entered signature 
data with initial signature data / If the update period for the current password expires 
update processing unit invalidates the password (Col 3, Line 24-25, *663) 

14. Claims 16-30 and 31-45 correspond to claims 1-15 

15. Claims 1-6, 11-15, 16-21, 26-30, 31-36, 41-46 rejected under 35 U.S.C. 102(b) 
as being anticipated by "Unix Digital Security" (hereafter referred to as UDS). 

16. Astoclaim(s) 1,46: 

UDS teaches a computer password authentication/update system comprising: 

• Storing registered signature data / Password usage history (Page 2, Section 
1.1.2, UDS) 

• Comparing entered signature data with registered signature data to calculating 
an evaluation value / Determine authentication based on signature evaluation 
value / Determining aging based on evaluation value / Configurable password 
lifetime (Page 4, Section 6.3.2, UDS) 
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17. As to claim(s) 2: 

Storing evaluation values calculated in the past with dates as list / Adding the evaluation 
value to list / Determining if aging has occurred after value is added to list / Password 
usage history (Page 2, Section 1 .1 .2, UDS) , Recording date, time, terminal, 
unsuccessful login attempts (Page 1-2, Sections 1.1.1 and 1.1.2, UDS) 

18. As to claim(s) 3: 

Determining age when authentication is successful / the password is valid until the 
expiration time is reached (Page 6, Section 2.2.3, Line 8, UDS) 

19. As to claim(s) 4: 

Requesting re-registration of registered signature when aging has occurred / You must 
request your ISSO to unlock your account and change your password when you next 
log in (Page 6, Section 2.2.3, Line 14, UDS) 

20. As to claim(s) 5: 

Issuing a warning when aging has occurred / if the lifetime passes the account is 
disabled. If you try to login to a disabled account, the system displays an appropriate 
message (Page 6, Section 2.2.3, Line 14, UDS) 



21. As to claim(s) 6: 
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Aging has occurred when value is over prescribed criterion / if the lifetime passes the 
account is disabled. If you try to login to a disabled account, the system displays an 
appropriate message (Page 6, Section 2.2.3, Line 14, UDS) 

22. As to claim(s) 1 1 : 

Aging determined when number of runs corresponding to failed authentication is over a 
prescribed number/ Automatic account lockout after a specified number of consecutive 
bad access attempts (Page 5, Line 8, UDS) 

23. Astoclaim(s) 12: 

Aging determined when addition of failed authentications exceeds prescribed number 
within prescribed period / Automatic account lockout after a specified number of 
consecutive bad access attempts (Page 5, Line 8, UDS), if the lifetime passes the 
account is disabled. If you try to login to a disabled account, the system displays an 
appropriate message (Page 6, Line 14, UDS) 

24. Astoclaim(s) 13: 

Aging determined when rate of change of failed authentications exceeds prescribed rate 
/ Automatic account lockout after a specified number of consecutive bad access 
attempts (Page 5, Line 8, UDS). If specified number is 1 the rate changes, and aging is 
determined. 
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25. As to claim(s) 14: 

Stored signature data includes initial signature and last successful signature / Password 
Control: configurable password usage history (0-9 previously used passwords) (Page 4- 
5, Section 6.3.2, UDS) 

Comparing entered signature data with initial signature data and last signature data to 
calculate respective evaluation values to determine successful authentication / Aging 
determined by evaluation values calculated from comparison of entered signature data 
with initial signature data / Controlling new passwords based on the password usage 
history references previous passwords 

26. Astoclaim(s) 15: 

Entered data are transmitted from a client via a network / You can use the Network 
Information Service (NIS) to centralize the management of the password, group, and 
extended profile information. A NIS master server can serve an environment of NIS 
clients (Page 4, Section 9.3, UDS) 

27. Claims 16-30 and 31-45 correspond to claims 1-15 

Conclusion 



28. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jonathan R Adams whose telephone number is 
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(571)272-3832. The examiner can normally be reached on Monday - Friday from 10am 
to 6pm. 

29. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse, can be reached on (703) 308-4789. The fax phone number 
for the organization where this application or proceeding is assigned is (571)272-3838. 
Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 305-3900. 




mGORY MORSE 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



